General
- Target 645e9a4af1260a9a24025ad35de4d3993d1a68015164e4c1484048c70ba8ff02
- Size 1.5MB
- Sample261015-nnec2sb13z
- SHA256 645e9a4af1260a9a24025ad35de4d3993d1a68015164e4c1484048c70ba8ff02
- MD5 3576ae74d1d6072f133d4ab2358d402f
- SHA1 18b99b9f8119440cf6581c4b8cfbbc5fed41cde5
- SHA512 ddf8f846e33d34eb899df036e35329f514e83b2a34db36719c54cd98bd156e95e93fbd2726275bbf7350f2b940156bd7f672daf9018c1d60dff48313aec6ef4c
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhO:WylFHUv6ReIt0jSrOE
- TLSH T1F1657D12765D81B1D19C14702D6F7336A9306A193B36CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
645e9a4af1260a9a24025ad35de4d3993d1a68015164e4c1484048c70ba8ff02.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 645e9a4af1260a9a24025ad35de4d3993d1a68015164e4c1484048c70ba8ff02
- Size 1.5MB
- SHA256 645e9a4af1260a9a24025ad35de4d3993d1a68015164e4c1484048c70ba8ff02
- MD5 3576ae74d1d6072f133d4ab2358d402f
- SHA1 18b99b9f8119440cf6581c4b8cfbbc5fed41cde5
- SHA512 ddf8f846e33d34eb899df036e35329f514e83b2a34db36719c54cd98bd156e95e93fbd2726275bbf7350f2b940156bd7f672daf9018c1d60dff48313aec6ef4c
- SSDEEP 24576:jqylFH50Dv6RwyeQvt6ot0h9HyrOLiruAmEnnAhO:WylFHUv6ReIt0jSrOE
- TLSH T1F1657D12765D81B1D19C14702D6F7336A9306A193B36CEE3B3D2DD789E32BD1AE36209
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE